Privacy Policy

This Policy applies to information we collect when you visit our marketing website, create an account, use the FarmulaAI consultant application, or otherwise interact with us (together, the "Service"). It applies to farm managers, agronomy consultants, sales representatives, organization administrators, and visitors, collectively "you" or "users."

This Policy does not apply to third-party websites, products, or services that may be linked from the Service, or to information that a customer organization independently controls about its own end users outside the Service.

We collect information in the following categories:

a. Account and profile information

• Name, email address, password (hashed), and phone number.
• Role and organization details (e.g., farmer, consultant, admin, viewer) and organization/membership information.
• Communications you send us, including support requests.

b. Farm, field, and agronomy data

• Farm, field, and crop records, including addresses, boundaries, crop and season history, and application/visit history you or your organization enter into the Service.
• Soil sample reports and related documents you upload, including scanned or photographed images and PDFs, and the nutrient readings, values, and metadata extracted from them (including via optical character recognition).
• Product and recommendation data generated through your use of the Service, including inputs used, rules applied, and outputs produced.

c. Usage, device, and log data

• Log data such as IP address, browser type, device identifiers, operating system, pages viewed, and timestamps.
• Diagnostic and performance data, including crash reports and error logs, used to maintain and improve the Service.
• Approximate location derived from IP address, and precise device location if you separately grant that permission on a mobile device (e.g., to attach a field visit location).

d. Information from other sources

• Information provided by an organization administrator who invites you to join an organization or enters records on your behalf.
• Publicly available agronomy, product, and label reference data used to power recommendations and knowledge base features.

• Provide, operate, maintain, and improve the Service.
• Process soil report uploads, extract nutrient data, and generate rule-based product and application recommendations.
• Create and manage accounts, organizations, and memberships, and authenticate access.
• Communicate with you about the Service, including service notices, security alerts, and support responses.
• Monitor, debug, and secure the Service, including detecting and preventing fraud, abuse, and unauthorized access.
• Analyze usage trends in aggregate or de-identified form to improve product design and reliability.
• Comply with legal obligations and enforce our Terms.
• With your consent, send product updates or marketing communications, which you may opt out of at any time.

We do not sell your personal information, and we do not use your farm or agronomy data to train third-party public models or to advertise to you.

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases to process personal data:

• Contractual necessity — to provide the Service you request, including account creation and recommendation generation.
• Legitimate interests — to secure, debug, and improve the Service, provided those interests are not overridden by your rights.
• Consent — for optional marketing communications and any processing where consent is legally required, which you may withdraw at any time.
• Legal obligation — where processing is required to comply with applicable law.

We share information only in the following circumstances:

• Within your organization — data you enter is visible to other members of your organization according to their role and permissions.
• Service providers — we use vetted third-party providers for infrastructure (including cloud hosting, content delivery, and database services), email delivery, and error monitoring, solely to operate the Service on our behalf and under confidentiality and data protection obligations.
• Legal and safety reasons — to comply with a legal obligation, enforce our Terms, protect the rights, property, or safety of FarmulaAI, our users, or the public, or respond to a lawful request from public authorities.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy or a policy that provides equivalent protection.
• With your direction — when you explicitly direct us to share information with a named third party.

We do not sell personal information or share it with third parties for their own cross-context behavioral advertising.

We use strictly necessary cookies and similar local storage technologies to keep you signed in, remember preferences, and secure the Service. We may use additional analytics technologies to understand aggregate usage; where required by law, we will request your consent before doing so and provide a way to change your preference. You can control cookies through your browser settings, though disabling essential cookies may affect the Service.

We retain personal information and farm/agronomy data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Uploaded soil report documents and extraction metadata are retained to preserve an auditable record of recommendations. When information is no longer needed, we delete or de-identify it, except where retention is required by law.

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit, access controls, and password hashing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify affected users and applicable authorities as required by law.

We are based in Canada and use service providers that may process data in Canada, the United States, and other countries. Where we transfer personal information from the EEA, UK, or other regions with data transfer restrictions, we rely on appropriate safeguards, such as standard contractual clauses or an adequacy determination, to protect that information.

Regardless of where you are located, you may contact us to request to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information, subject to legal retention requirements.
• Receive a copy of your personal information in a portable format.
• Object to or restrict certain processing, or withdraw consent where processing is based on consent.
• Opt out of marketing communications at any time using the unsubscribe link or by contacting us directly.

We handle all such requests manually, by email, at owais@sunzal.tech. We do not currently operate a self-service privacy portal or automated request tool; we will verify your identity and respond within the timeframe required by applicable law. We will not discriminate against you for exercising these rights.

If you are located in the European Economic Area or the United Kingdom, you have the rights described in Section 10 under the General Data Protection Regulation (and, in the UK, the UK GDPR), including the right to lodge a complaint with your local data protection supervisory authority. We aim to respond to verified requests within one month, extendable by a further two months for complex requests, as permitted by law. Requests are submitted and fulfilled by email only, as described in Section 10; we do not currently maintain a dedicated EU representative or automated data subject access request tool.

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to know what personal information we collect, use, and disclose, to request deletion or correction, to opt out of the sale or sharing of personal information, and to be free from discrimination for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising, so there is no "Do Not Sell or Share My Personal Information" opt-out link on this site. To exercise any of these rights, email us at owais@sunzal.tech and we will verify your identity and respond within 45 days, as required by law.

We are based in Canada and handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. We collect, use, and disclose personal information only with consent or as otherwise permitted or required by law, use it only for the purposes described in this Policy, and retain it only as long as necessary for those purposes. You may access, correct, or withdraw consent for the use of your personal information at any time, subject to legal and contractual restrictions, by contacting us using the details in Section 18.

The Service is intended for business use by adults working in agriculture and agronomy and is not directed to children. We do not knowingly collect personal information from anyone under 16. If we learn that we have collected personal information from a child under 16, we will delete it. If you believe a child has provided us with personal information, contact us at owais@sunzal.tech.

Some browsers offer a "Do Not Track" signal. There is no common industry standard for how to respond to these signals, and the Service does not currently respond to them differently than described in this Policy.

The Service may reference or link to third-party websites, product manufacturers, or label information that we do not control. This Policy does not apply to those third parties, and we encourage you to review their own privacy practices before providing information to them.

We may update this Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated Policy with a revised "Last updated" date, and, for material changes, we will provide additional notice, such as an email or in-app notification, before the change takes effect.

If you have questions, concerns, or requests regarding this Policy or your personal information, contact us at:

FarmulaAI
British Columbia, Canada
Email: owais@sunzal.tech